Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa
File: c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa (raw, json)
Hash identifier: IknzGab26/rYmFUfGpyXAZ0KpIA86lB8XU/Wc0Nd+o0=
Subject key identifier: EA:D7:DE:82:4E:68:AB:3A:75:51:21:26:08:A2:31:00:13:53:95:81
Certificate issuer: /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial: 010D0C9F432858494E2EA89A11B4928B39B9BF50
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 399820
IP address blocks: 204.137.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:a8:9a:11:b4:92:8b:39:b9:bf:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=1c6940af-56b1-4142-a9a9-d8df7aeb2938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:78:45:ac:33:3c:ba:82:da:d1:e3:87:00:
e8:08:bf:5a:99:e0:fe:34:cf:82:83:19:2e:f0:8c:
6c:98:dd:07:a9:31:a5:1e:81:7c:94:64:ed:38:98:
23:1d:52:29:8c:7a:e0:c0:54:16:d9:de:c8:00:2e:
74:d0:6c:55:8f:c7:e9:f5:ad:14:63:2d:2f:4a:d9:
33:5e:85:ec:89:99:c5:84:c3:86:d4:19:0b:81:3c:
4f:cf:6b:8d:2a:b9:c9:6b:b4:ae:92:48:54:d0:86:
de:17:44:a1:1d:66:df:a9:25:84:ca:db:03:b3:6a:
1d:0b:91:de:aa:cf:07:76:06:c0:bc:0b:29:c9:78:
44:77:e7:48:15:f3:3e:3f:52:db:3a:57:e7:6b:ad:
6f:4b:df:f3:2f:1f:b2:a2:15:0e:0e:73:57:06:e3:
4d:73:c3:9d:80:f2:79:3a:a9:7d:16:bc:03:84:eb:
d6:96:43:50:00:30:cd:99:da:3e:7c:93:50:30:e3:
1a:d8:ef:b7:98:6a:5d:ea:46:13:de:80:25:6d:ec:
67:25:e2:cd:4d:cd:f1:d7:0c:a1:55:84:86:60:6c:
00:2b:fa:22:f1:4e:95:d5:57:94:c0:1c:dc:fb:87:
b2:d4:ff:09:a9:d6:76:24:b2:23:8d:ad:04:70:b8:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D7:DE:82:4E:68:AB:3A:75:51:21:26:08:A2:31:00:13:53:95:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl
X509v3 Authority Key Identifier:
keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
sbgp-ipAddrBlock: critical
IPv4:
204.137.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:66:87:27:65:06:1c:52:fb:b3:5d:37:3a:f2:8b:f1:be:aa:
2c:24:e9:c7:95:9e:e5:8e:45:8c:49:8d:78:87:81:fe:3e:cf:
86:b3:db:1b:3b:11:20:29:51:dd:50:93:23:d5:5a:2e:90:45:
37:99:74:b8:4b:07:4e:4d:46:83:bd:2e:25:3f:b6:9d:cb:a9:
bc:66:4d:e9:c9:52:f1:69:8f:a4:eb:39:4b:99:40:ad:f7:35:
e5:82:46:a3:7b:ca:1a:5c:3d:4d:f9:92:2a:bd:98:5c:58:40:
ff:a6:83:84:a5:2c:2c:a9:eb:e4:52:0d:02:97:bd:88:8c:0e:
d0:c1:66:f4:60:f8:17:5f:37:24:6a:4f:8f:5d:60:a2:7a:0a:
0d:16:7a:28:23:47:5a:cb:ee:f1:fe:ec:28:c2:95:b0:7a:64:
5b:49:fd:33:cf:d3:27:e4:82:a9:c5:e4:da:0a:65:74:30:9c:
5b:b0:4e:33:1b:fe:27:46:c1:ce:ef:95:1b:ae:f8:93:da:b7:
69:c6:e0:25:94:a5:8e:db:95:ab:bb:e2:d8:d2:ba:02:2d:01:
ec:8e:c6:44:dc:30:17:56:fa:83:81:b4:7d:88:85:4f:dc:a8:
9d:a8:9b:8a:37:61:ca:d7:85:a4:55:24:2a:f4:ab:e8:af:60:
8c:fc:8f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:16 2025 by rpki-client